Secure element
In computer science and cybersecurity, a secure element (SE) is a secure operating system (OS) in a tamper-resistant processor or secure component. It can protect assets (root of trust, sensitive data, cryptographic keys and certificates, and applications) against high-level software and hardware attacks. Applications that process this sensitive data on an SE are isolated and so operate within a controlled environment not affected by software (including possible malware) found elsewhere on the OS.[1][2]
The hardware and embedded software meet the requirements of the Security IC Platform Protection Profile [PP 0084] including resistance to physical tampering scenarios described within it.[3] More than 96 billion secure elements were produced and shipped between 2010 and 2021.[4]
SEs exist in various form factors, as devices such as smart cards, UICCs, or smart microSD cards,[5] or embedded, or integrated, as parts of larger devices.[6][7] SEs are an evolution of the chips in earlier smart cards, which have been adapted to suit the needs of numerous use cases, such as smartphones, tablets, set-top boxes, wearables, connected cars, and other internet of things (IoT) devices. The technology is widely used by technology firms such as Oracle,[8] Apple[9] and Samsung.[10]
SEs provide secure isolation, storage and processing for applications (called applets) they host while being isolated from the external world (e.g. rich OS and application processor when embedded in a smartphone) and from other applications running on the SE. Java Card and MULTOS are the most deployed standardized multi-application operating systems currently used to develop applications running on SEs.[8]
Since 1999, GlobalPlatform has been the body responsible for standardizing secure element technologies to support a dynamic model of application management in a multi-actor model. GlobalPlatform also runs Functional and Security Certification programmes for secure elements, and hosts a list of Functional Certified and Security Certified products. GlobalPlatform technology is also embedded in other standards such as ETSI SCP (now SET) since release 7.[11] A Common Criteria Secure Element Protection Profile has been released targeting EAL4+ level with ALC_DVS.2 and AVA_VAN.5 extensions to standardize the security features of a secure element across markets.[12]
References
- ↑ Bertrand, Cambou. "Enhancing Secure Elements - Technology and Architecture". Northern Arizona University. https://in.nau.edu/wp-content/uploads/sites/223/2020/06/CH10-Enhancing-Secure-Elements-May-1st-2016.pdf.
- ↑ "What is Secure Element?". Kaspersky. https://encyclopedia.kaspersky.com/glossary/secure-element/.
- ↑ "Security IC Platform Protection Profile with Augmentation Packages". Common Criteria. https://www.commoncriteriaportal.org/files/ppfiles/pp0084b_pdf.pdf.
- ↑ "Worldwide Market of Secure Elements Confirms its Resiliency in 2021". Eurosmart. https://www.eurosmart.com/worldwide-market-of-secure-elements-confirms-its-resiliency-in-2021/.
- ↑ Lee, Nicole (June 6, 2013). "SD Association adds secure NFC support to its smartSD memory cards". Engadget. https://guce.engadget.com/consent?brandType=nonEu&gcrumb=D1bnWYY&lang=en-US&done=https%3A%2F%2Fwww.engadget.com%2F2013-06-06-sd-association-nfc-support-smartsd.html%3Fguccounter%3D1%26guce_referrer%3DaHR0cHM6Ly93d3cuZ29vZ2xlLmNvbS8%26guce_referrer_sig%3DAQAAADoGSFhiYXKXHHqGwn3GAkV2q9LUgMJsuJnQX4DnDYZa_OE-kfd8hL6gjQRy1oOlcrSoxgkz_IiGjz_1tJeNuNZETDsZK9vNVIf4vp97NE19VvkjmAatxCVjBIs33eCS3rL3WCClL9Coq_Dd9tedcTOLxyWnUjiJQgM8YrDS52SK.
- ↑ Mehta, Tushar (April 4, 2022). "What is Integrated SIM (iSIM)? How is it better than eSIM?". Digital Trends. https://www.digitaltrends.com/mobile/integrated-sim-isim-explainer/.
- ↑ Page, Carly (October 5, 2021). "Yubico's new hardware key features a fingerprint reader for passwordless logins". TechCrunch. https://techcrunch.com/2021/10/05/yubicos-new-hardware-key-lands-with-a-fingerprint-reader-for-passwordless-logins/?guccounter=1.
- ↑ 8.0 8.1 "The Open Application Platform for Secure Elements". Oracle. https://www.oracle.com/technetwork/java/javacard/overview/java-card-data-sheet-19-01-07-5250140.pdf.
- ↑ "How Apple Pay keeps users’ purchases protected". Apple. https://support.apple.com/en-gb/guide/security/seccb53a35f0/web.
- ↑ "Samsung Elevates Data Protection for Mobile Devices with New Security Chip Solution". Samsung. May 26, 2020. https://news.samsung.com/global/samsung-elevates-data-protection-for-mobile-devices-with-new-security-chip-solution.
- ↑ "Smart Cards; Remote APDU structure for UICC based applications (Release 12)". ETSI. https://www.etsi.org/deliver/etsi_ts/102200_102299/102226/12.00.00_60/ts_102226v120000p.pdf.
- ↑ "GlobalPlatform Technology Secure Element Protection Profile Version 1.0". Common Criteria. https://www.commoncriteriaportal.org/files/ppfiles/CCN-CC-PP-5-2021.pdf.
 |  |
